| Package | Affected versions | Patched versions |
|---|---|---|
| ops manager | ≥ 7.0.0, < 7.0.23≥ 8.0.0, < 8.0.27 | 7.0.238.0.27 |
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organization or project.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free